rewrite permissions in intranet